Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1510426 - (CVE-2017-15277) CVE-2017-15277 ImageMagick: Unitialized palette in ReadGIFImage when processing a crafted GIF file
CVE-2017-15277 ImageMagick: Unitialized palette in ReadGIFImage when processi...
Status: NEW
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
low Severity low
: ---
: ---
Assigned To: Red Hat Product Security
impact=low,public=20170721,reported=2...
: Security
Depends On:
Blocks:
  Show dependency tree / graph
 
Reported: 2017-11-07 06:56 EST by Andrej Nemec
Modified: 2017-11-07 06:56 EST (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed:
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Andrej Nemec 2017-11-07 06:56:49 EST 
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.

Upstream issue:

https://github.com/ImageMagick/ImageMagick/issues/592

Upstream patch:

https://github.com/ImageMagick/ImageMagick/commit/9fd10cf630832b36a588c1545d8736539b2f1fb5
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.